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This listing of claims will replace all prior versions, and listings, of claims in the application. 
Listing of Claims: 

1 . (Currently amended) A method of propagating rights management protection to an 
email and to an attachment of the email, the attachment comprising a[[n]] rights- 
management-protectable document attachment , the method comprising: 

authoring the email with the rights management protectable attachment; 
generating a content key; 
generating a bind identifier; 

generating rights data including the generated content key and the generated bind 
identifier, wherein the rights data sets forth each entity having rights with respect to the email 
and the rights-management-protectable attachment, and wherein the rights data further sets 
forth a description of such rights; 

firstly applying rights management protection to the rights-management-protectable 
attachment of the email based on the generated content key^ and the generated bind identifier^ 
and the generated rights data, wherein the generated rights data is attached to the rights- 
management-protectable attachment ; 

attaching the rights-management-protectable attachment to the email; and 

secondly applying rights management protection to the combined email and attached 
rights management protectable attachment based on the generated content key^ at*d the 
generated bind identifier , and the generated rights data, wherein the generated rights data is 
attached to the email, TT;!! and 

wherein the rights -management-protected email and the rights-management- 
protectable attachment thereof share the generated content key,, and the generated bind 
identifie r, and the generated rights data such that a license obtained for the rights- 
management-protected email and having therein the generated bind identifier and the 
generated content key can be applied to render the rights-management-protected email and 
also the rights-management-protectable attachment thereof. 

2. (Currently amended) The method of claim 1 further comprising: 
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providing content key to an rights management server so that all requests for a license 
corresponding to an item are directed to such rights management server; and 

generating rights data including the protected content key and the generated bind 
identifier and setting forth each entity that has rights with respect to the rights management 
protected email and the rights management protectable attachment thereof and for each such 
entity a description of such rights; and 

wherein applying rights management protection to each item comprises: 

encrypting at least one of the email or the rights -management-pro tec table 
attachment the item with the content key to form a content-key-encrypted item; and 

attaching the generated rights data to the corresponding content-key-encrypted 
item to form a package containing the item in a[[n]] rights -management-protected form, 
whereby the rights data from the package for any item may be employed to obtain the license 
for the rights-management-protected email and the rights -management-pro tectable 
attachment thereof, such license thus including the bind identifier of the rights data and being 
bound to the rights-management-protected email and the rights-management-protectable 
attachment thereby. 

3. (Currently amended) The method of claim 2 further comprising submitting the 
generated rights data for signing and receiving signed rights data based thereon, whereby the 
signed rights data is tamper-resistant in that any changes to the signed rights data will cause 
the signature to fail to verify, and wherein attaching the generated rights data comprises 
attaching the signed rights data. 

4. (Currently amended) The method of claim 3 wherein submitting the generated rights 
data for signing comprises submitting the generated rights data to the rights management 
server for signing. 

5. (Currently amended) The method of claim 25 wherein protecting content key 
comprises further comprising encrypting the content key with a public key of the rights 
management server to result in a rights-management-public -key-encrypted content key such 
that only the rights management server with a corresponding rights management private key 
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can decrypt the rights-management-public-key-encrypted content key to reveal the content 
key. 



6. (Currently amended) The method of claim 2 wherein attaching the generated rights 
data comprises concatenating the signed generated rights data with the corresponding 
content-key-encrypted item to form [[a]] the package containing the item in an the rights- 
management-protected form. 



7. (Currently amended) A computer^readable storage medium having stored thereon an 
email and an associated attachment, the email and the attachment being rights z management z 
protected, the attachment of the email being rights -management-protected based on a 
particular content key, aftd a particular bind identifier, and common rights data attached to the 
attachment, the email with the rights-management-protected attachment itself being rights- 
management-protected based on the particular content key,, and the particular bind identifier, 
and the common rights data attached to the email, wherein the rights -management-protected 
email with the rights-management-protected attachment therein share the particular content 
key,, attd the particular bind identifie r, and the common rights data such that a license 
obtained for the rights -management-protected email and having therein the generated bind 
identifier and the generated content key can be applied to render the rights-management- 
protected email and also the rights-management-protected attachment therein , and wherein 
the computer-readable storage medium includes computer-executable instructions for storing 
the email and the associated attachment on the computer-readable storage medium . 

8. (Currently amended) The computer-readable storage medium of claim 7 wherein the 
rights management protection for each item comprises the item being encrypted encrypting at 
least one of the rights-management-protected email or the rights-management-protected 
attachment with the content key to form a content-key-encrypted item and having attached 
thereto the common rights data to form a package containing the item in a[[n]] rights- 
management-protected form, the common rights data including the particular bind identifier 
and the particular content key protected provided to a[[n]] rights management server so that 
all requests for a license corresponding to the item are directed to such rights management 
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server, and setting forth each entity that has rights with respect to the rights-management- 
protected email and the rights-management-protected attachment thereof and for each such 
entity a description of such rights, whereby the common rights data from the package for any 
kem may be employed to obtain the license for the rights-management-protected email and 
the rights-management-protected attachment therein, such license thus including the 
particular bind identifier of the signed common rights data and being bound to the rights- 
management-protected email and the rights-management-protected attachment thereby. 

9. (Currently amended) The computer-readable storage medium of claim 8 wherein the 
common rights data comprises rights data submitted for signing and received as signed rights 
data based thereon, whereby the signed rights data is tamper-resistant in that any changes to 
the signed rights data will cause the signature to fail to verify. 

10. (Currently amended) The computer-readable storage medium of claim 9 wherein the 
common rights data is submitted to the rights management server for signing. 

1 1 . (Currently amended) The computer-readable storage medium of claim 8 wherein the 
content key protected comprises the content key is encrypted with a public key of the rights 
management server to result in a rights-management-public-key-encrypted content key such 
that only the rights management server with a corresponding rights management private key 
can decrypt the rights-management-public-key-encrypted content key to reveal the content 
key. 

12. (Currently amended) The computer-readable storage medium of claim 8 wherein the 
common rights data is concatenated with the corresponding content-key-encrypted item to 
form [[a]] die package containing the item in an die rights-management-protected form. 

13. (Currently amended) A computer-readable storage medium having stored thereon 
computer-executable instructions for performing a method of propagating rights management 
protection to an email and to an attachment of the email, the attachment comprising a[[n]] 
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rights-management-protectable document attachment , the method computer-executable 
instructions comprising instructions for : 

authoring the email with the rights management protectable attachment; 

generating a content key; 

generating a bind identifier; 

generating rights data including the generated content key and the generated bind 
identifier, wherein the rights data sets forth each entity having rights with respect to the email 
and the rights-management-protectable attachment, and wherein the rights data further sets 
forth a description of such rights; 

firstly applying rights management protection to the rights-management-protectable 
attachment of the email based on the generated content key^ and the generated bind identifier^ 
and the generated rights data, wherein the generated rights data is attached to the rights- 
management-protectable attachment ; 

attaching the rights-management-protectable attachment to the email; and 

secondly applying rights management protection to the combined email and attached 
rights management protectable attachment based on the generated content key,, aftd the 
generated bind identifier , and the generated rights data, wherein the generated rights data is 
attached to the email |T;ll and 

wherein the rights -management-protected email and the rights-management- 
protectable attachment thereof share the generated content key,, end the generated bind 
identifie r, and the generated rights data such that a license obtained for the rights- 
management-protected email and having therein the generated bind identifier and the 
generated content key can be applied to render the rights-management-protected email and 
also the rights-management-protectable attachment thereof. 

14. (Currently amended) The computer-readable storage medium of claim 13 wherein the 
method further comprises: 

protecting content key to an rights management server so that all requests for a license 
corresponding to an item are directed to such rights management server; and 

generating rights data including the protected content key and the generated bind 
identifier and setting forth each entity that has rights with respect to the rights management 
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protected email and the rights management protectable attachment thereof and for each such 
entity a description of such rights; and 

wherein applying rights management protection to each item comprises: 

encrypting at least one of the email or the rights -management-pro tectable 
attachment the item with die content key to form a content-key-encrypted item; and 

attaching the generated rights data to the corresponding content-key-encrypted 
item to form a package containing the item in a[[n]] rights -management-protected form, 
whereby the rights data from the package for any item may be employed to obtain the license 
for the rights-management-protected email and the rights -management-pro tectable 
attachment thereof, such license thus including the bind identifier of the rights data and being 
bound to the rights -management-protected email and the rights-management-protectable 
attachment thereby. 

15. (Currently amended) The computer-readable storage medium of claim 14 wherein the 
computer-executable instructions method further comprise[[s]] instructions for submitting the 
generated rights data for signing and receiving signed rights data based thereon, whereby the 
signed rights data is tamper-resistant in that any changes to the signed rights data will cause 
the signature to fail to verify, and wherein attaching the generated rights data comprises 
attaching the signed rights data. 

16. (Currently amended) The computer-readable storage medium of claim 15 wherein 
submitting the generated rights data for signing comprises submitting the generated rights 
data to the rights management server for signing. 

17. (Currently amended) The computer-readable storage medium of claim 44 26 wherein 
protecting content key comprises the computer-executable instructions further comprise 
instructions for encrypting the content key with a public key of the rights management server 
to result in a rights-management-public -key-encrypted content key such that only the rights 
management server with a corresponding rights management private key can decrypt the 
rights-management-public-key-encrypted content key to reveal content key. 
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18. (Currently amended) The computer-readable storage medium of claim 14 wherein 
attaching the generated rights data comprises concatenating the signed generated rights data 
with the corresponding content-key-encrypted item to form [[a]] the package containing the 
item in an the rights-management-protected form. 

19. (Currently amended) A computer-readable storage medium having stored thereon a 
data structure comprising an email having an attachment, the email and the attachment being 
rights z management z protected, the attachment of the email being rights-management- 
protected based on a particular content key., and a particular bind identifier, and common 
rights data attached to the attachment, the email with the rights-management-protected 
attachment itself being rights-management-protected based on the particular content key ? and 
the particular bind identifier, and the common rights data attached to the email, wherein the 
rights-management-protected email with the rights -management-protected attachment therein 
share the particular content key,, and the particular bind identifie r, and the common rights data 
such that a license obtained for the rights-management-protected email and having therein the 
generated bind identifier and the generated content key can be applied to render the rights- 
management-protected email and also the rights-management-protected attachment therein. 

20. (Currently amended) The computer-readable storage medium of claim 19 wherein the 
rights management protection for each item comprises the item being encrypted encrypting at 
least one of the rights-management-protected email or the rights-management-protected 
attachment with the content key to form a content-key-encrypted item and having attached 
thereto the common rights data to form a package containing the item in a[[n]] rights- 
management-protected form, the common rights data including the particular bind identifier 
and the particular content key protected provided to a[[n]] rights management server so that 
all requests for a license corresponding to the item are directed to such rights management 
server, and setting forth each entity that has rights with respect to the rights-management- 
protected email and the rights-management-protected attachment thereof and for each such 
entity a description of such rights, whereby the common rights data from the package for any 
kern may be employed to obtain the license for the rights-management-protected email and 
the rights-management-protected attachment therein, such license thus including the bind 
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identifier of the signed common rights data and being bound to the rights-management- 
protected email and the rights-management-protected attachment thereby. 

21 . (Currently amended) The computer-readable storage medium of claim 20 wherein the 
common rights data comprises rights data submitted for signing and received as signed rights 
data based thereon, whereby the signed rights data is tamper-resistant in that any 20 changes 
to the signed rights data will cause the signature to fail to verify. 

22. (Currently amended) The computer-readable storage medium of claim 21 wherein the 
common rights data is submitted to the rights management server for signing. 

23. (Currently amended) The computer-readable storage medium of claim 20 wherein the 
content key protected comprises content key is encrypted with a public key of the rights 
management server to result in a rights-management-public -key-encrypted content key such 
that only the rights management server with a corresponding rights management private key 
can decrypt the rights-management-public-key-encrypted content key to reveal content key. 

24. (Currently Amended) The computer-readable storage medium of claim 20 wherein 
the common rights data is concatenated with the corresponding content-key-encrypted item to 
form [[a]] the package containing the item in an die rights -management-protected form. 

25. (New) The method of claim 1 further comprising providing the generated content key 
to a rights management server so that all requests for a license corresponding to at least one 
of the email or the rights-management-protectable attachment are directed to the rights 
management server. 

26. (New) The computer-readable storage medium of claim 13 wherein the computer- 
executable instructions further comprise instructions for providing the generated content key 
to a rights management server so that all requests for a license corresponding to at least one 
of the email or the rights-management-protectable attachment are directed to the rights 
management server. 
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